Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/Vp9GVtW_RHDqe5SYrmSwWBn2ClU.roa
File: Vp9GVtW_RHDqe5SYrmSwWBn2ClU.roa (raw, json)
Hash identifier: J1/ROaTd8Fn7dnmbYCsjD7UvQZCk49OSZ+rctaf/mL8=
Subject key identifier: 56:9F:46:56:D5:BF:44:70:EA:7B:94:98:AE:64:B0:58:19:F6:0A:55
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0968
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Vp9GVtW_RHDqe5SYrmSwWBn2ClU.roa
Signing time: Sat 02 Nov 2024 15:55:03 +0000
ROA not before: Sat 02 Nov 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 02 Nov 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2408 (0x968)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 2 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=569F4656D5BF4470EA7B9498AE64B05819F60A55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:66:19:c1:38:31:10:07:59:07:e2:bf:47:53:
cd:3b:95:51:e2:b1:d3:00:61:49:0d:2e:f1:b1:dd:
cb:ee:3c:23:89:e7:cc:8c:4f:9b:5f:15:87:6a:96:
2c:be:e4:f9:bb:c5:30:78:50:32:36:90:92:1c:b4:
29:f2:79:89:78:7e:7a:ce:ed:c9:83:6d:84:68:d0:
56:65:2d:e0:21:76:82:11:47:77:0d:fe:61:15:13:
a8:4e:5f:0f:57:37:27:d0:d1:03:7f:52:a8:f6:71:
21:dc:62:46:0d:aa:72:5e:b2:81:31:d8:bb:43:c1:
d6:d6:1e:64:f5:c7:54:5b:03:74:e7:b3:7b:ea:a6:
ce:2a:1c:8a:97:c3:ef:20:38:25:34:b7:7c:65:80:
09:c1:64:3f:d0:81:89:f4:ee:25:60:77:f4:96:3c:
94:5d:2e:ea:b1:ef:1f:84:be:62:96:23:5a:6a:78:
1c:aa:55:9b:e6:cc:f6:af:1a:8f:a7:1b:23:6b:fd:
71:a8:1b:71:62:ca:78:94:6b:6d:6d:58:51:37:d9:
27:d3:d8:92:5b:dd:73:42:e8:68:20:a6:b5:26:92:
2e:e6:48:33:ba:02:39:3e:51:7e:60:a1:54:a2:7d:
ad:8d:16:de:df:79:a5:a8:da:01:e1:5c:bb:b4:2a:
92:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9F:46:56:D5:BF:44:70:EA:7B:94:98:AE:64:B0:58:19:F6:0A:55
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Vp9GVtW_RHDqe5SYrmSwWBn2ClU.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:2a:e5:3d:6f:5c:b1:5f:42:59:c0:07:d7:8b:7d:19:21:88:
ee:3d:b0:0d:1c:68:c0:f8:aa:37:4c:0d:e3:3a:4f:47:bd:37:
57:4b:89:0f:e6:55:a3:8d:09:a8:88:89:3a:79:bb:64:93:76:
3e:80:94:52:8b:82:7f:f4:cd:a6:e5:0b:30:88:91:3c:9c:a4:
b3:b6:b1:b9:95:69:24:93:32:b8:7f:8f:64:9a:8c:62:22:d4:
df:a3:91:23:19:42:43:04:21:7c:73:2c:05:a6:9a:71:76:bd:
ff:fd:47:35:e7:46:aa:78:3a:26:90:d2:b2:c4:56:e7:3d:01:
6d:23:3c:88:72:44:2e:07:1a:0f:ce:d2:bd:d5:88:2d:42:51:
97:70:08:e9:32:ee:19:e5:74:b7:47:1b:92:66:90:75:32:31:
98:80:e9:29:54:dc:8b:66:d7:a9:92:2d:9c:33:b0:76:e7:cb:
89:ec:98:a3:dd:58:67:39:d2:29:91:61:53:b4:70:ef:d4:d1:
ed:bb:54:f8:cd:d9:14:c3:0b:67:a7:cd:6e:94:33:f7:9d:1b:
a8:ad:db:95:5f:92:fe:9e:42:90:4e:c0:c7:68:a3:81:98:46:
05:7a:9e:ba:b0:f4:f5:91:b9:f2:2d:9d:7f:79:87:73:29:f1:
1a:8c:1b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 2 22:25:48 2024 by rpki-client on console-fra.rpki-client.org